
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier: 0Xg/f5CujyDnmAS4ywIV9xMW0R9Vt9df+eZaI78DCxE=
Subject key identifier: A6:6E:18:6F:F1:DB:70:ED:5F:97:29:23:66:CE:B3:0F:8B:42:28:5C
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number: 0109
Signing time: Thu 23 Jul 2026 07:49:37 +0000
Manifest this update: Thu 23 Jul 2026 07:49:36 +0000
Manifest next update: Thu 30 Jul 2026 07:49:36 +0000
Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: ytzBbB3kRVdLsO+Hz2yYZ378x4DDl3Y3wiPmewgKWzM=)
2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Validity
Not Before: Jul 23 07:49:36 2026 GMT
Not After : Jul 30 07:49:36 2026 GMT
Subject: CN=6a61c790-2a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:8b:1a:a3:82:aa:00:4a:51:59:65:8d:22:
b6:53:8d:d4:ff:96:4a:6f:48:9a:5b:54:32:2c:eb:
b9:35:40:96:1a:7b:cc:63:d4:d2:79:8e:63:e0:51:
22:06:43:a0:60:0a:9d:db:0d:84:93:a9:c9:cb:4d:
1b:29:f0:31:2f:ac:14:bb:fd:41:9a:7f:57:5b:92:
15:23:a8:17:2b:08:78:16:db:5a:16:66:ef:63:ef:
47:d6:a1:e4:66:a6:5c:44:63:f2:3e:53:ac:8c:2d:
57:4e:6f:9c:da:c2:2e:ea:e7:49:96:4d:dd:5c:4e:
1a:c8:a3:b5:5c:6f:b1:31:47:a5:e8:12:cb:de:fc:
c4:cf:2b:ad:48:2a:5d:fc:4a:b6:3c:18:35:60:e8:
5b:99:62:b7:a7:a3:21:b4:be:62:4a:71:aa:00:ba:
d0:4b:fc:eb:64:35:6f:4e:b9:3a:39:ad:e7:36:3d:
1a:5b:a2:6f:a8:e1:d0:7e:73:75:16:a7:38:6d:57:
d5:15:e5:91:4e:2d:37:fd:4b:fc:e8:ce:51:19:8b:
95:6d:35:1f:2f:a2:cd:f0:c3:4e:c2:ca:7c:74:93:
45:e0:5f:f7:56:38:96:8a:f6:78:6c:60:77:97:71:
8f:f3:d2:b6:b6:d0:a1:bc:b3:c3:ae:ae:55:96:d1:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6E:18:6F:F1:DB:70:ED:5F:97:29:23:66:CE:B3:0F:8B:42:28:5C
X509v3 Authority Key Identifier:
keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:d2:07:e6:38:7c:e2:8e:13:d8:dd:14:0d:9f:89:b3:47:82:
fc:92:2f:aa:74:19:38:ee:53:1e:bc:37:85:18:d3:fe:76:d0:
f2:31:13:6a:11:36:98:76:f8:e9:de:3d:b0:99:87:d7:36:0b:
c0:6a:6d:a7:99:eb:25:37:b8:00:c0:f7:37:c8:14:77:89:8a:
a6:ff:86:c2:be:4f:e4:f9:7e:2a:da:6a:88:ac:36:c2:5d:5c:
68:15:ef:5f:22:26:01:4f:88:ba:7e:94:19:5d:76:5d:2a:45:
56:d2:c9:ac:f4:b6:a7:8b:cf:7a:ed:b6:0b:50:2e:cf:ab:77:
ff:a8:af:a4:55:8e:2b:a8:37:3c:63:21:a8:04:61:49:4c:1e:
20:30:af:82:81:fe:ad:bd:b3:ba:4f:77:ec:56:f1:c9:64:14:
3a:0c:0f:58:e0:ae:c0:73:21:d2:60:0f:af:cd:9e:3b:5d:28:
47:3e:00:89:b2:d5:4a:fb:3e:0e:44:55:1b:a8:02:f2:35:39:
99:31:2f:32:0c:c6:36:ad:f5:3e:52:92:59:54:2f:f3:63:11:
6d:07:5a:57:40:18:7e:41:1e:37:10:26:1a:46:cf:c0:cd:b5:
bf:69:be:4b:6a:7e:fd:a6:45:83:a3:08:7f:ea:02:32:2c:66:
c4:4c:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:13 2026 by rpki-client